Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) spoofing filters




I have a MAX 200+ and a pipeline 50.  I'd like
to set up some filters to block spoofing of
my network addresses 206.81.41.0-64-128-192/26.
On my MAX200 I went under:

Ethernet
Filters
named a new one (no spoofing) 90-504
Input filters
In filter 01
Ip...

Forward=No
Src Mask=255.255.255.192
Src Adrs=206.81.41.0
Dst Mask=0.0.0.0
Dst Adrs-0.0.0.0
Protocol=0
Src Port Cmp=None
Src Port #=N/A
Dst Port Cmp=None
Dst Port #=N/A
TCP Estab=N/A


In filter 02
Ip...

Forward=No
Src Mask=255.0.0.0
Src Adrs=127.0.0.0
Dst Mask=0.0.0.0
Dst Adrs=0.0.0.0
Protocol=0
Src Port Cmp=None
Src Port #=N/A
Dst Port Cmp=None
Dst Port #=N/A
TCP Estab=N/A


In filter 03 - 05

same as filter 1 covering subnets
64, 128, 192.

90-700 Answer
Session options...
Data Filter=4

Does this look right?

Can I set things up similarly if I switch to
my pipeline 50?

I have another class C internal to this one
so I guess I could set up a filter for it
too if I'm on the right track.  Thanks

	Henry Hollenberg     speed@rcwm.com


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>